Re: [PR] SOCKS4(A)

Hi. On 02.10.20 13:54, Christopher Faulet wrote: Le 02/10/2020 à 08:58, Willy Tarreau a écrit : So if anyone currently uses socks4 to talk to servers, I suggest you run a quick test on 2.2 or 2.3 to see if health checks continue to work over socks4 or not, in which case it's likely you'll be

[PATCH 1/4] MINOR: cli/proxy: add `srv_use_ssl` to `show servers state`

The aim is to be able to hot change `ssl` parameter for each server. Signed-off-by: William Dauchy --- doc/management.txt | 1 + include/haproxy/server-t.h | 3 ++- src/proxy.c| 5 +++-- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/doc/management.txt

[PATCH 4/4] MINOR: cli/ssl: configure ssl on server at runtime

in the context of a progressive migration, we want to be able to activate SSL ciphering on outgoing connections to the server at runtime without reloading. This patch adds a `set server ssl` command to allow that: - call common `srv_init_sslctx` from previous commit rework - call `prepare_srv` to

[PATCH 2/4] MINOR: ssl: protect ssl_sock_prepare_srv_ctx from double ctx allocation

this will be useful if we want to be able to call it at runtime through the CLI. Not 100% mandatory but might be a good protection for future use. Signed-off-by: William Dauchy --- src/ssl_sock.c | 16 +--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git

[PATCH 0/4] add set server ssl command

Hello, This patchset is an attempt to add a new command for configure ssl on server at runtime: - the first patch adds the possibility to observe the change on a `show servers state`. - the two next ones are only here to prepare the last one to add the command. I added them separatly to

[PATCH 3/4] MINOR: ssl: create common ssl_ctx init

so we can reuse it later Signed-off-by: William Dauchy --- include/haproxy/server.h | 1 + src/cfgparse-ssl.c | 31 ++- src/server.c | 21 + 3 files changed, 24 insertions(+), 29 deletions(-) diff --git